Hi all,

I've been trying to use the CAS proxy mode with Liferay Portal, so that a
portlet can use the portal to authenticate a CAS protected service. I set
the ProxyTicketReceptor servlet in the web.xml. This works great if the
protected service is for example a Java Web application, protected with the
CAS filter.

Nevertheless, I noticed the ticket provided by the
ProxyTicketReceptor.getProxyTicket method (which I'm using in the portlet)
begins with ST. I thought this ticket would be a proxy ticket and so would
begin by PT. I then encountered problems if my protected services is for
example a PHP application, using the PHP CAS API. I get the following error:

<cas:authenticationFailure code='INVALID_TICKET'>
                Ticket failed validation specification. Possible errors could 
include
attempting to validate a Proxy Ticket via a Service Ticket validator, or not
complying with the renew true request.
</cas:authenticationFailure>

It seems the PHP CAS client tries to validate the ticket as a service
ticket, but notices that it does not fit. The result is that the
authentication fails.

Does anyone know if I'm misusing the ProxyTicketReceptor servlet, as it does
not generate a proxy ticket?

Thanks all.
-- 
View this message in context: 
http://www.nabble.com/ProxyTicketReceptor.getProxyTicket-provides-ST-tf3080322.html#a8558333
Sent from the CAS Users mailing list archive at Nabble.com.

_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to